CVE Vulnerability Catalog

The 'userModify' feature in Silverpeas Core 6.3.1 is vulnerable to Cross-Site Request Forgery (CSRF) leading to privilege escalation. If an administrator visits a malicious URL while authenticated, the attacker can become an administrator user.

Silverpeas Core 6.3.1 has an incorrect access control vulnerability in the 'Porlet Deployer' component, allowing administrators to deploy .WAR portlets. This could lead to unauthorized code execution or privilege escalation.

Silverpeas Core 6.3.1 and below contain an incorrect access control vulnerability. An attacker with low privileges can execute the administrator-only function of enabling maintenance mode, making the application unavailable to all users.

A flaw was found in xorg-server that can be triggered by a specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty. This may lead to an integer overflow, potentially resulting in the disclosure of sensitive information.

A flaw was found in xorg-server that allows for out-of-bounds memory reads and writes when querying or changing XKB button actions, such as moving from a touchpad to a mouse. This may lead to local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page.

In Undertow, a flaw was found where when an AJP request exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing the TCP connection to close without returning an AJP response. This can allow a malicious user to repeatedly send requests exceeding max-header-size, causing a Denial of Service (DoS).

A vulnerability in the AnyConnect SSL VPN feature of Cisco ASA and FTD could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This is due to improper validation of the packet's inner source IP after decryption.

Podatność CVE-2023-48677 dotyczy lokalnego podwyższania uprawnień z powodu ataku typu DLL hijacking. Dotyczy to produktów Acronis Cyber Protect Home Office, Acronis Cyber Protect Cloud Agent, Acronis Cyber Protect 16 oraz Acronis True Image OEM w wersjach przed określonymi buildami.

DedeCMS v5.7.111 was found to have a reflective cross-site scripting (XSS) vulnerability in the select_media_post_wangEditor.php component. An attacker can inject malicious JavaScript code into a request, which will be executed in the victim's browser.

Podatność w powłoce U-Boot prowadzi do eskalacji uprawnień na urządzeniach produkcyjnych. Atakujący może wykorzystać tę lukę, aby uzyskać wyższe uprawnienia w systemie.

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information.

W Quarkus znaleziono lukę, która występuje podczas odbierania żądania przez websocket bez określonych uprawnień opartych na rolach dla operacji GraphQL. Mimo zabezpieczeń punktu końcowego, Quarkus przetwarza żądanie bez uwierzytelnienia.

In CPython 3.12.0 in the subprocess module on POSIX platforms, when the extra_groups=[] parameter is used, the process does not call setgroups(0, NULL) before exec(), causing the new process to inherit the parent process's groups. This issue was fixed in CPython 3.12.1 and only affects processes run with root privileges.

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This could allow a local attacker to crash the system or leak internal kernel information.

A vulnerability in the configuration functionality of the BMC (IPMI) on Supermicro X11 and M11 devices with firmware up to version 3.17.02 allows remote authenticated users to execute arbitrary commands.

A vulnerability in the web interface of the BMC (IPMI) on Supermicro X11 and M11 devices with firmware versions before 3.17.02 allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable CGI endpoints.

A web server in the BMC (IPMI) implementation on Supermicro X11 and M11 devices with firmware up to 3.17.02 allows remote unauthenticated attackers to perform directory traversal, potentially disclosing sensitive information.

Podatność CVE-2023-35039 dotyczy niewłaściwego ograniczenia nadmiernych prób uwierzytelnienia w wtyczce Be Devious Web Development Password Reset with Code dla WordPress REST API. Problem ten występuje w wersjach od n/a do 0.0.15.